All vulnerabilities

Servers and applications

GHSA-q3rg-xx5v-4mxh

Missing rate-limit to password change endpoint

Severity
Medium 5.9
Published
30 May 2024
Last changed
30 May 2024
Added to UpHeron
3 Nov 2026
Fixed in
4.1.17
Sources
Project advisories (GitHub)

Affected software

SoftwareAffected versions
MastodonServers and applications · github:mastodon/mastodon
  • Every version before 4.1.17

References